600594 - Crash in [@ nsDocument::AddToIdTable | nsDocument::AddToIdTable(mozilla::dom::Element*, nsIAtom*) ]

Status: RESOLVED DUPLICATE of bug 614583

(Core :: DOM: Core & HTML, defect)

Description

[Marcia Knous [:marcia]]

Seen while reviewing crash stats. https://crash-stats.mozilla.com/report/index/a6ecf16e-511b-49b0-9002-f7b8c2100928 is the report I noticed in the Mac pool of reports, but http://tinyurl.com/28cg6f6 links to the other reports which are all Mac.

Bug 575462 Comment 16 indicates that this is probably a new bug so thus filing this.

Frame 	Module 	Signature [Expand] 	Source
0 	XUL 	nsDocument::AddToIdTable 	nsIAtom.h:66
1 	XUL 	nsStyledElement::BindToTree 	content/base/src/nsStyledElement.cpp:223
2 	XUL 	nsMappedAttributeElement::BindToTree 	content/base/src/nsMappedAttributeElement.cpp:51
3 	XUL 	nsGenericHTMLElement::BindToTree 	content/html/content/src/nsGenericHTMLElement.cpp:938
4 	XUL 	nsHTMLAnchorElement::BindToTree 	content/html/content/src/nsHTMLAnchorElement.cpp:196
5 	XUL 	nsGenericElement::BindToTree 	content/base/src/nsGenericElement.cpp:2972
6 	XUL 	nsStyledElement::BindToTree 	content/base/src/nsStyledElement.cpp:219
7 	XUL 	nsMappedAttributeElement::BindToTree 	content/base/src/nsMappedAttributeElement.cpp:51
8 	XUL 	nsGenericHTMLElement::BindToTree 	content/html/content/src/nsGenericHTMLElement.cpp:938
9 	XUL 	nsGenericElement::BindToTree 	content/base/src/nsGenericElement.cpp:2972
10 	XUL 	nsStyledElement::BindToTree 	content/base/src/nsStyledElement.cpp:219
11 	XUL 	nsMappedAttributeElement::BindToTree 	content/base/src/nsMappedAttributeElement.cpp:51
12 	XUL 	nsGenericHTMLElement::BindToTree 	content/html/content/src/nsGenericHTMLElement.cpp:938
13 	XUL 	nsGenericElement::BindToTree 	content/base/src/nsGenericElement.cpp:2972
14 	XUL 	nsStyledElement::BindToTree 	content/base/src/nsStyledElement.cpp:219
15 	XUL 	nsMappedAttributeElement::BindToTree 	content/base/src/nsMappedAttributeElement.cpp:51
16 	XUL 	nsGenericHTMLElement::BindToTree 	content/html/content/src/nsGenericHTMLElement.cpp:938
17 	XUL 	nsINode::doInsertChildAt 	content/base/src/nsGenericElement.cpp:3597
18 	XUL 	nsINode::ReplaceOrInsertBefore 	content/base/src/nsGenericElement.cpp:4302
19 	XUL 	nsIDOMNode_AppendChild 	nsINode.h:1222
20 	XUL 	js::Interpret 	js/src/jsinterp.cpp:4477
21 	XUL 	js::Invoke 	js/src/jsinterp.cpp:484
22 	XUL 	js_fun_apply 	js/src/jsfun.cpp:2389
23 	XUL 	js::Interpret 	js/src/jsinterp.cpp:4477
24 	XUL 	js::Invoke 	js/src/jsinterp.cpp:484
25 	XUL 	js_fun_apply 	js/src/jsfun.cpp:2389
26 	XUL 	js::Interpret 	js/src/jsinterp.cpp:4477
27 	XUL 	js::Invoke 	js/src/jsinterp.cpp:484
28 	XUL 	js_fun_apply 	js/src/jsfun.cpp:2389
29 	XUL 	js::Interpret 	js/src/jsinterp.cpp:4477
30 	XUL 	js::Invoke 	js/src/jsinterp.cpp:484
31 	XUL 	js::ExternalInvoke 	js/src/jsinterp.cpp:622
32 	XUL 	JS_CallFunctionValue 	js/src/jsinterp.h:910
33 	XUL 	nsJSContext::CallEventHandler 	dom/base/nsJSEnvironment.cpp:2140
34 	XUL 	nsGlobalWindow::RunTimeout 	dom/base/nsGlobalWindow.cpp:8803
35 	XUL 	nsGlobalWindow::TimerCallback 	dom/base/nsGlobalWindow.cpp:9148
36 	XUL 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:425
37 	XUL 	nsTimerEvent::Run 	xpcom/threads/nsTimerImpl.cpp:517
38 	XUL 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:547
39 	XUL 	NS_ProcessPendingEvents_P 	nsThreadUtils.cpp:200
40 	XUL 	nsBaseAppShell::NativeEventCallback 	widget/src/xpwidgets/nsBaseAppShell.cpp:131
41 	XUL 	nsAppShell::ProcessGeckoEvents 	widget/src/cocoa/nsAppShell.mm:394
42 	CoreFoundation 	CoreFoundation@0x4de90

Comment 1

[Bob Clary [:bc] (inactive)]

I think this is all platforms actually:

<http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=contains&query=nsDocument%3A%3AAddToIdTable&date=11%2F04%2F2010%2004%3A53%3A10&range_value=1&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&admin=&signature=nsDocument%3A%3AAddToIdTable%28mozilla%3A%3Adom%3A%3AElement%2A%2C%20nsIAtom%2A%29>

I see a related crash for Mac, Windows and Linux at <http://inforum.insite.com.br/17356/2632270.html> and <http://inforum.insite.com.br/2317/6852284.html>

Comment 2

[Johnny Stenback (:jst)]

I bet this is the same problem as reported in bug 614583. Duping.